Important Photon OS Security Update - PHSA-2026-5.0-0911

Updates of 'rubygem-nokogiri', 'rubygem-faraday', 'python3-mistune', 'python3-urllib3' packages of Photon OS have been released...

Oracle Linux 9 : libxml2 (ELSA-2026-28254)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28254 advisory. 2.9.13-14.1 - Fix CVE-2024-34459 RHEL-177882 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

AZL-91248 CVE-2026-11972 affecting package python3 for versions less than 3.12.9-14

When using the "tarfile" module with a file opened in "streaming mode" mode="r|" the tarfile module did not properly handle EOF, making archive parsing take exponentially longer...

AZL-91260 CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value...

Oracle Linux 9 : python-jwcrypto (ELSA-2026-19197)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19197 advisory. 1.5.6-3 - Limit max plaintext size for JWE decompression Resolves: RHEL-166029 Tenable has extracted the preceding description block directly from the Oracle...

Medium: python-click

Issue Overview: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account. CVE-2026-7246 Affected Packages: python-click Issue Correction: Run dnf update python-click...

Medium: python3-urllib3

Issue Overview: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connectionfromurl.urlopen..., assertsamehost=False still forward these sensitive headers. This vulnerability is fixed in 2.7.0...

Critical Photon OS Security Update - PHSA-2026-4.0-1038

Updates of 'redis', 'erlang', 'coredns', 'rsync', 'python3-pip' packages of Photon OS have been released...

Photon OS 4.0: Python3 PHSA-2026-4.0-1018

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1018. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 8 : libxml2 (ELSA-2026-26354)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26354 advisory. 2.9.7-21.5 - Fix CVE-2024-34459 RHEL-36405 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0882

Updates of 'python3-mako', 'python3', 'linux-esx', 'python3-ujson', 'python3-mistune', 'python3-lxml', 'linux', 'ruby' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0882

Updates of 'python3-mako', 'python3', 'python3-ujson', 'python3-mistune', 'linux' packages of Photon OS have been released...

MAL-2026-5719 Malicious code in ect-654321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec784a9a1926de8d2c18de41c996e69e10f7001bf9fdc7604edc22d5775b4540 ect-654321 contains only a package.json with a preinstall lifecycle hook that unconditionally executes wget...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-idna: python3-idna-3.18-1.hum1 noarch python-idna-3.18-1.hum1.src src...

AZL-89781 CVE-2026-52858 affecting package vim for versions less than 9.2.0620-1

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...

CVE-2026-52858

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...

CVE-2026-52858: Improper Control of Generation of Code

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...

AZL-90159 CVE-2026-9669 affecting package python3 for versions less than 3.12.9-14

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer...

OPENSUSE-SU-2026:10973-1 python3-oslo.messaging-doc-18.1.0-1.1 on GA media

These are all security issues fixed in the python3-oslo.messaging-doc-18.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-trustme: python-trustme-doc-1.2.1-2.hum1 noarch python3-trustme-1.2.1-2.hum1 noarch python-trustme-1.2.1-2.hum1.src src...